e-commerce shopping

technology software

forum

English

OptanonConsent

lang

countryID

rewardall71

Domain 'shop.asiamiles.com' uses the commercial generic top-level domain (.com), featuring subdomain 'shop'. The registrable portion 'asiamiles' spans 9 characters split between 5 vowels and four consonants. It segments into 2 words: asia, miles. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

html/0f/66/0f6675b9-e2ad-4bc1-87df-1c94b0dc7282_fallback.html.gz

Milesback - Shop online and earn miles | Asia Miles by Cathay GB

html/0f/66/0f6675b9-e2ad-4bc1-87df-1c94b0dc7282.html.gz

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

/images/am_shop_apple_touch_icon_144x144.png

Milesback, earn, earn miles, save, discounts

Keywords

Shop on Milesback. Earn every time, every mile. With an all-new interface, Milesback makes shopping online worth it. Enjoy our limited-time miles rewards, giving you more reasons to shop and treat yourself and your loved ones! 

Description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

ASIAMILES.COM

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-PJM3BG');


	window.CSRF_TOKEN='b67c4c9a33f804082d26f929ecdbe9a5a9bc341e80b832e5831090d88cb85880.297403876db2879416399ae37b0722fb976ea7f1e6527b1926d873925e154d7b';



	const bc = new BroadcastChannel("login_status");
	const message = "logged-out"

	bc.postMessage(message);
	bc.onmessage = (event) => {
		if (event.data != message) {
			location.reload();
		}
	};



	$(function () {
		if ($.cookie('cx_prelogin') == '1') {
			//testing the session first
			// $.ajax({
			// 	url: 'https://openiam.cathaypacific.com/am/json/alpha/sessions?_action=getsessioninfo',
			// 	type: 'post',
			// 	data: {},
			// 	headers: {
			// 		'Accept-API-Version': 'resource=4.0',
			// 		'Content-type': 'application/json',
			// 	},
			// 	xhrFields: {
			// 		withCredentials: true
			// 	},				
			// 	dataType: 'json',
			// 	success: function (data) {
			// 		console.info(data);
			// 	}
			// });
			location.href = 'https://shop.asiamiles.com/en/login?ref=/';
		}
	})


HSTS

Google

✅ Low Risk - https://shop.asiamiles.com/en/

Requests	IP Address	Location	AS Autonomous System
203	18.133.177.185	London, England, United Kingdom	AS16509AMAZON-02
146	104.26.12.8	United States	AS13335CLOUDFLARENET
24	104.26.13.8	United States	AS13335CLOUDFLARENET
24	172.67.73.210	United States	AS13335CLOUDFLARENET
24	172.64.155.119	United States	AS13335CLOUDFLARENET
24	2a06:98c1:3104::6812:2089	United States	AS13335CLOUDFLARENET
24	2606:4700:20::681a:c08	United States	AS13335CLOUDFLARENET
24	2606:4700:20::681a:d08	United States	AS13335CLOUDFLARENET
24	2a00:1450:4001:812::2008	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
24	2a06:98c1:310d::ac40:9b77	United States	AS13335CLOUDFLARENET
364	15	-	-

Security Scan Report: shop.asiamiles.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History